# Response Status:403 Forbidden

**URL:** <https://community.hubspot.com/t/response-status-403-forbidden/117395>\
**Category:** APIs & Integrations\
**Tags:** professional\
**Created:** [October 1, 2024, 6:13am UTC](https://community.hubspot.com/t/response-status-403-forbidden/117395 "2024-10-01T06:13:20Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![ILamana](https://avatars.discourse-cdn.com/v4/letter/i/c57346/32.png) [@ILamana](https://community.hubspot.com/u/ILamana)\
**Post date:** [October 1, 2024, 6:13am UTC](https://community.hubspot.com/t/response-status-403-forbidden/117395/1 "2024-10-01T06:13:20Z")

</div>

I am encountering a “403 Forbidden” status when attempting to call the endpoint:

[https://api.hubspot.com/crm/v3/objects/notes](https://api.hubspot.com/crm/v3/objects/notes) to create a note.

This issue began unexpectedly, without any changes on my end, and the endpoint was functioning correctly before.

---

<div class="post-metadata">

**Author:** ![MrJustinGivens](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/mrjustingivens/32/49537_2.png) [@MrJustinGivens](https://community.hubspot.com/u/MrJustinGivens)\
**Post date:** [October 1, 2024, 2:09pm UTC](https://community.hubspot.com/t/response-status-403-forbidden/117395/2 "2024-10-01T14:09:34Z")

</div>

@ILamana,

It seems like the scope might have changed.

You can double-check the [OAuth endpoint](https://developers.hubspot.com/beta-docs/guides/api/app-management/oauth/tokens#retrieve-access-token-metadata) and see what scopes are available for your token.

You might also try the Object ID 0-46 ([https://api.hubspot.com/crm/v3/objects/0-46](https://api.hubspot.com/crm/v3/objects/0-46))

---

<div class="post-metadata">

**Author:** ![ILamana](https://avatars.discourse-cdn.com/v4/letter/i/c57346/32.png) [@ILamana](https://community.hubspot.com/u/ILamana)\
**Post date:** [October 3, 2024, 7:04am UTC](https://community.hubspot.com/t/response-status-403-forbidden/117395/3 "2024-10-03T07:04:57Z")

</div>

Hi,  
I have updated the scopes but I am still getting a 403.  
One of the lines of the response body is: Enable JavaScript and cookies to continue  
Thank you so much.

---

<div class="post-metadata">

**Author:** ![ILamana](https://avatars.discourse-cdn.com/v4/letter/i/c57346/32.png) [@ILamana](https://community.hubspot.com/u/ILamana)\
**Post date:** [October 4, 2024, 9:41am UTC](https://community.hubspot.com/t/response-status-403-forbidden/117395/4 "2024-10-04T09:41:18Z")

</div>

Hi,

I have updated the scopes but I am still getting a 403.

One of the lines of the response body is: _Enable JavaScript and cookies to continue_  
Do you know if it could be any other issue? As I said, we have not changed anything on our side.

Thank you in advance.